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Apple is very seriously committed to protecting your data and we work hard to deliver the most 
secure hardware, software and services available. We believe our customers have a right to 
understand how their personal data is managed and protected. This report provides information 
regarding requests Apple received from government agencies worldwide and U.S. private parties 
from July 1 through December 31, 2022. 


Apple receives various forms of legal requests seeking information from or actions by Apple. We 
receive requests from governments globally where we operate and from private parties. 


Government request circumstances can vary from instances where law enforcement agencies 
are working on behalf of customers who have requested assistance regarding lost or stolen 
devices, to instances where law enforcement are working on behalf of customers who suspect 
their credit card has been used fraudulently to purchase Apple products or services, to instances 
where an account is suspected to have been used unlawfully. Requests can also seek to 
preserve an Apple account, restrict access to an Apple account or delete an Apple account. 
Additionally, requests can relate to emergency situations where there is imminent harm to the 
safety of any person. Apple may also receive requests from government agencies seeking 
customer data related to specific latitude and longitude coordinates (geofence) for a specified 
time period. Apple does not have any data to provide in response to geofence requests. 


Private party request circumstances generally relate to instances where private litigants are 
involved in either civil or criminal proceedings. 


Types of legal requests Apple receives from the United States can be: subpoenas, court orders, 
search warrants, pen register/trap and trace orders, or wiretap orders. 


Types of legal requests Apple receives internationally can be: Production Orders (Australia, 
Canada, New Zealand), Requisition or Judicial Rogatory Letters (France), Solicitud Datos 
(Spain), Ordem Judicial (Brazil), Auskunftsersuchen (Germany), Obligation de dépdét 
(Switzerland), (4. A838 © Bam (K#8 (Japan), Personal Data Request (United Kingdom), as well as 
equivalent court orders and/or requests from other countries. 


The restrictions imposed by the sanctions laws generally prohibit Apple from responding to 
requests from countries, territories or governments sanctioned by the U.S. Department of 
Treasury, with the exception of requests involving exempt informational material or where prior 
authorization has been secured. 


The type of customer data sought in requests varies depending on the case under investigation. 
For example, in stolen device cases, law enforcement generally seek details of customers 
associated with devices or device connections to Apple services. In credit card fraud cases, law 
enforcement generally seek details of suspected fraudulent transactions. Depending on what 
the legal request asks, Apple will provide subscriber or transaction details in response to valid 
legal requests received. 


In instances where an Apple account is suspected of being used unlawfully, law enforcement 
may seek details of the customer associated with the account, account connections or 
transaction details or account content. Any U.S. government agency seeking customer content 
data from Apple must obtain a search warrant issued upon a showing of probable cause. 
International requests for content must comply with applicable laws, including the U.S. Electronic 
Communications Privacy Act (ECPA). A request under a Mutual Legal Assistance Treaty or 
Agreement with the U.S. is in compliance with ECPA. 


The type of customer data sought in emergency situations generally relates to details of 
customers’ connection to Apple services. We have a dedicated team available around the clock 
to respond to emergency requests. Apple processes emergency requests from law enforcement 
globally on a 24/7 basis. An emergency request must relate to circumstances involving imminent 
danger of death or serious physical injury to any person. If Apple believes in good faith that it is a 
valid emergency, we may voluntarily provide information to law enforcement on an emergency 
basis. 
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Apple has a centralized and standardized process for receiving, tracking, processing, and 
responding to legal requests from law enforcement, government, and private parties worldwide, 
from when a request is received until when a response is provided. 


Government and private entities are required to follow applicable laws and statutes when 
requesting customer information and data. We contractually require our service providers to 
abide by the same standard for any government information requests for Apple data. Our legal 
team reviews requests received to ensure that the requests have a valid legal basis. If they do, 
we comply with the requests and provide data responsive to the request. If we determine a 
request does not have a valid legal basis, or if we consider it to be unclear, inappropriate and/or 
over-broad, we challenge or reject it. 


Apple counts requests received from government agencies worldwide and United States private 
parties within the reporting period in which they are received. Overall numbers of requests and 
responses are reported. 


A request with a valid legal basis is processed and responded to, and is counted as one request. 
A request that is challenged/rejected is counted as one request. Where new legal process is 
submitted to amend the request, it is counted as a new request. We count each request we 
challenge or reject for account-based, account restriction/deletion, emergency and private party 
requests; and report these numbers accordingly. 


We count the number of discernible devices, financial identifiers, accounts and/or push tokens 
specified in requests, and report these accordingly by type. If there are two identifiers for one 
device in a request, for example a serial number and IMEI number, we count this as one device. If 
there are multiple identifiers for one account in a request, for example Apple ID, full name and 
phone number, we count this as one account. 


For United States Government Requests by Legal Process Type reporting, where two types of 
legal process are combined in a single request, such as a search warrant with an incorporated 
court order, we record the request at the highest level of legal process and the request would be 
reported as a search warrant. An exception is where a pen register/trap and trace order is 
received; this is counted as a pen register/trap and trace order, notwithstanding that it may 
include a search warrant. 


We report on requests and responses in the following categories: 
Worldwide Government Device Requests 
2) Worldwide Government Financial Identifier Requests 
3) Worldwide Government Account Requests 
4) Worldwide Government Account Preservation Requests 
5) Worldwide Government Account Restriction/Deletion Requests 
6) Worldwide Government Push Token Requests 
7) Worldwide Government Emergency Requests 
8) US-UK Data Access Agreement: Investigatory Powers Act Requests from the UK 
9) United States Government National Security Requests 
10) United States Government Device Requests by Legal Process Type 
11) United States Government Financial Identifier Requests by Legal Process Type 
12) United States Government Account Requests by Legal Process Type 
13) United States Government Push Token Requests by Legal Process Type 
14) United States Government Geofence Requests by Legal Process Type 
15) United States Private Party Requests for Information 
16) United States Private Party Requests for Account Restriction/Deletion 
17) Worldwide Government Digital Content Provider Requests 


For government agency requests for customer information and data, we report the numbers of 
requests we receive and our responses in various categories. For United States National Security 
requests for customer information and data, we report as much detail as we are legally allowed. 
In order to report FISA non-content and content requests in separate categories, Apple is 
required by law to delay reporting by 6 months and report the numbers in ranges of 500, 
pursuant to the USA FREEDOM Act of 2015. For United States-United Kingdom Data Access 
Agreement (CLOUD) Investigatory Powers Act requests, Apple is required by law to delay 
reporting by 6 six months and report the numbers in ranges of 500, pursuant to 2018 No. 349. 


When we receive an account request seeking our customers’ information and data, we notify the 
customer that we have received a request concerning their personal data except where we are 
explicitly prohibited by the legal process, by a court order Apple receives, or by applicable law. 
We reserve the right to make exceptions, such as instances where we believe providing notice 
creates a risk of injury or death to an identifiable individual, or where the case relates to child 
endangerment, or where notice is not applicable to the underlying facts of the case. 


Table 1: Worldwide Government Device Requests 
July 1-December 31, 2022 


Table 1 provides information regarding device-based requests received. Examples of such requests are where law enforcement 
agencies are working on behalf of customers who have requested assistance regarding lost or stolen devices. Additionally, Apple 
regularly receives multi-device requests related to fraud investigations. Device-based requests generally seek details of 
customers associated with devices or device connections to Apple services. 


Country or Region’ # of Device Requests Received # of Devices Specified in the # of Device Requests Where % of Device Requests Where 
Requests Data Provided Data Provided 
Australia | 522 5,592 | 237 45% 
China mainland 1,298 2,139 1,261 97% 
Hong Kong 58 73 | 3 5% 
Japan 275 507 210 76% 
New Zealand nN | D 18% 
Philippines 1 1 0 0% 
Singapore 846 895 | 589 70% 
South Korea 29 555 18 62% 
Sri Lanka 1 ‘1 0 0% 
Taiwan 37 75 12 32% 
Thailand | 6 14 0) 0% 
Asia Pacific Total 3,084 9,864 2,332 76% 
Andorra 10 11 2 20% 
Austria 53 172 0 0% 
Belgium 45 100 31 69% 
Czech Republic 43 120 26 60% 
Denmark WE 13 4 57% 
Estonia 1 3 0 0% 
Finland 6 18 2 33% 
France 625 935 | 289 46% 
Germany 10,921 103,394 7,429 68% 
Greece 7 8 | 0) 0% 
Hungary 21 39 5 24% 
India 100 62,120 9 9% 
Ireland 33 90 21 64% 
Israel 8 14 | 3 38% 
Italy 160 259 15 9% 
Kazakhstan 2 18 | () 0% 
Lithuania 1 100% 
Luxembourg a | 1 100% 
Netherlands 56 7,566 31 55% 
Norway 7 e | 1 14% 
Pakistan 0 0% 
Poland 52 71 | 9 17% 
Portugal 69 73 4 6% 
Romania 15 19 | 2 13% 
Russia 4 33,298 (¢) 0% 
San Marino | 0 0% 
Slovakia Wi 22 ie} 0% 
Slovenia 5 7 | 3) 60% 
Spain 965 1,560 512 53% 
Sweden 73 214 | 58 79% 
Switzerland 74 379 38 51% 
Tiirkiye 20 21 | 1 5% 
Ukraine 2 3 1 50% 
United Arab Emirates 1 | ty) 0% 
United Kingdom 857 1,210 654 76% 
eee Eastilndi3) | 14,290 211,809 9,152 64% 
IGE Tf | Ne | | JL 

Argentina 4 | 6 (0) 0% 
Brazil 4,326 14,835 3,819 88% 
Chile 212 340 | 143 67% 
Colombia 2 2 1 50% 
Dominican Republic 2 2 | 0) 0% 
Peru 1 2 0 0% 
Latin America Total 4,547 15,187 | 3,963 | 87% 


1Only countries / regions where Apple received device requests during report period July 1-December 31, 2022 are listed. 
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Table 1: Worldwide Government Device Requests (continued) 
July 1-December 31, 2022 


Table 1 provides information regarding device-based requests received. Examples of such requests are where law enforcement 
agencies are working on behalf of customers who have requested assistance regarding lost or stolen devices. Additionally, Apple 
regularly receives multi-device requests related to fraud investigations. Device-based requests generally seek details of 
customers associated with devices or device connections to Apple services. 


‘ ere F é , 
Country or Region’ # of Device Requests Received # of Devices Specified in the # of Device Requests Where % of Device Requests Where 


Requests Data Provided Data Provided 
Canada 25 29 22 88% 
Mexico 3 9 0 0% 
United States of America 6,464 12,016 5,296 82% 


North America Total 


5,318 | 82% 


1Only countries / regions where Apple received device requests during report period July 1-December 31, 2022 are listed. 


# of Device 
Requests Received 


# of Devices 
Specified in the 
Requests 


# of Device 
Requests Where 
Data Provided 


% of Device 
Requests Where 
Data Provided 


The number of device-based requests received from a government agency seeking customer 
data related to specific device identifiers, such as serial number or IMEI number. Requests can be 
in various formats such as subpoenas, court orders, warrants, or other valid legal requests. We 
count each individual request received from each country/region and report the total number of 
requests received by country/region. 


The number of devices specified in the requests. One request may contain one or multiple device 
identifiers. For example, in a case related to the theft of a shipment of devices, law enforcement 
may seek information related to several device identifiers in a single request. We count the 
number of devices identified in each request, received from each country/region, and report the 
total number of devices specified in requests received by country/region. 


The number of device-based requests that resulted in Apple providing data, such as customers 
associated with devices, device connections to Apple services, purchase, customer service, or 
repair information, in response to a valid legal request. We count each device-based request 
where we provide data and report the total number of such instances by country/region. 


The percentage of device-based requests that resulted in Apple providing data. We calculate this 
based on the number of device-based requests that resulted in Apple providing data per country/ 
region, compared to the total number of device-based requests Apple received from that country/ 
region. 


Table 2: Worldwide Government Financial Identifier Requests 
July 1-December 31, 2022 


Table 2 provides information regarding financial identifier-based requests received. Examples of such requests are where law 
enforcement agencies are working on behalf of customers who have requested assistance regarding suspected fraudulent credit 
card activity used to purchase Apple products or services. Financial identifier-based requests generally seek details of suspected 
fraudulent transactions. 


Country or Region’ # of Financial Identifier | # of Financial Identifiers # of Financial Identifier | % of Financial Identifier 
Requests Received Specified in the Requests | Requests Where Data Provided Requests Where Data Provided 
Australia 70 427 24 34% 
China mainland 35 161 29 83% 
Hong Kong 274 1,908 We 65% 
Japan 172 1,063 111 65% 
Macau We 31 13 76% 
Mongolia 1 1 0 0% 
New Zealand 4 39 3 75% 
Philippines i i 0 0% 
Singapore 473 3,659 310 66% 
South Korea 121 1,268 76 63% 
Taiwan 944 8,296 486 51% 
Thailand 8 | 8 1 13% 
Asia Pacific Total 2,120 16,862 1,230 58% 
Austria | 58 502 1 2% 
Belgium 9 301 4 44% 
Bulgaria 1 8 0 0% 
Czech Republic 18 35 10 56% 
Denmark 5 TE 1 20% 
Finland 4 23 2 50% 
France 303 583 154 51% 
Germany 725 2,058 275 38% 
Greece 12 56 0 0% 
Hungary 21 21 0 0% 
india 40 90 4 10% 
reland 33 231 15 45% 
israel 2 2 2 100% 
italy 135 306 9 7% 
Jordan 2 12 0 0% 
Kosovo 2 2 ie} 0% 
Latvia 1 1 0 0% 
Liechtenstein 1 1 ie} 0% 
Lithuania 3 3 2 67% 
Luxembourg ‘l 1 ie} 0% 
Malta 2 3 0 0% 
Netherlands 2 32 1 50% 
North Macedonia 3 4 0 0% 
Norway 2 6 2 100% 
Pakistan 1 il 0 0% 
Poland 61 136 4 7% 
Portugal 29 58 4 14% 
Romania 67 98 26 39% 
Russia 6 8 0 0% 
Serbia ‘1 1 (¢) 0% 
Slovakia 4 29 fl 25% 
Spain 621 1,022 167 27% 
Sweden 6 29 2 33% 
Switzerland 57 708 28 49% 
Turkiye 159 159 66 A2% 
United Arab Emirates 6 34 0 0% 
United Kingdom 38 106 6 16% 
cate rea Fact lnc, 2,441 6,677 786 32% 
Sati Americ 
Argentina 3 | 3 ie} 0% 
Brazil 9 9 8 89% 
Costa Rica 2 2 1 50% 
Peru 3 3 0 0% 
Turks and Caicos Islands | 1 | 1 | 1 100% 
Latin America Total 18 18 10 56% 


1Only countries / regions where Apple received financial identifier requests during report period July 1-December 31, 2022 are listed. 
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Table 2: Worldwide Government Financial Identifier Requests (continued) 
July 1-December 31, 2022 


Table 2 provides information regarding financial identifier-based requests received. Examples of such requests are where law 
enforcement agencies are working on behalf of customers who have requested assistance regarding suspected fraudulent credit 
card activity used to purchase Apple products or services. Financial identifier-based requests generally seek details of suspected 
fraudulent transactions. 


Country or Region! # of Financial Identifier # of Financial Identifiers # of Financial \dentifier % of Financial Identifier 
Requests Received Specified in the Requests Requests Where Data Provided Requests Where Data Provided 
Canada 12 56 9 75% 
Mexico 1 ‘ 0 0% 
United States of America 818 2,619 590 72% 
North America Total | 831 2,676 — 599 © 72% 


1Only countries / regions where Apple received financial identifier requests during report period July 1-December 31, 2022 are listed. 


# of Financial Identifier The number of financial identifier-based requests received from a government agency 
Requests Received seeking customer data related to specific financial identifiers, such as credit card or gift card 
number. Financial identifier-based requests can be in various formats such as subpoenas, 
court orders, warrants, or other valid legal requests. We count each individual request 
received from each country/region and report the total number of requests received by 
country/region. 


# of Financial The number of financial identifiers specified in the requests. One request may contain one or 
Identifiers Specified in multiple financial identifiers. For example, in a case related to large scale fraud, law 
the Requests enforcement may seek information related to several credit card numbers in a single request. 
We count the number of financial identifiers identified in each request, received from each 
country/region, and report the total number of financial identifiers specified in requests 
received by country/region. 


# of Financial Identifier The number of financial identifier-based requests that resulted in Apple providing data, such 
Requests Where as transaction details, in response to a valid legal request. We count each financial identifier- 
Data Provided based request where we provide data and report the total number of such instances by 
country/region. 


% of Financial Identifier The percentage of financial identifier-based requests that resulted in Apple providing data. 
Requests Where We calculate this based on the number of financial identifier-based requests that resulted in 
Data Provided Apple providing data per country/region, compared to the total number of financial identifier— 
based requests Apple received from that country/region. 


Table 3: Worldwide Government Account Requests 


July 1-December 31, 2022 


Table 3 provides information regarding account-based requests received. Examples of such requests are where law enforcement 
agencies are working on cases where they suspect an account may have been used unlawfully or in violation of Apple's terms of 
service. Account-based requests generally seek details of customers’ iTunes or iCloud accounts, such as aname and address; 
and in certain instances customers’ iCloud content, such as stored photos, email, iOS device backups, contacts or calendars. 


Country or Region’ 


# of Account 


# of Accounts 


# of Account Requests 


# of Account Requests 


# of Account Requests 


% of Account 


Requests Specified in Challenged in Part or Where Only Non-Content Where Content Data Requests Where 
Received the Requests Rejected in Full Data Provided Provided Data Provided 
Australia 221 298 27, 141 0 64% 
China mainland 49 149 10 30 5 71% 
Hong Kong 6 39 1 3 0 50% 
Indonesia 1 2 (0) (0) 1 100% 
Japan 293 455 31 207 () 1% 
Macau 1 1 1 (0) fe} 0% 
New Zealand 6 1 3 3 0 50% 
Singapore a 53 7 23 0 56% 
South Korea 28 39 5 14 0 50% 
Taiwan 223 421 119 97 0 43% 
Andorra 1 il (¢) 0 (0) 0% 
Austria 26 27 24 2 ie} 8% 
Belgium 42 49 6 34 (0) 81% 
Bulgaria 1 1 1 1 0 100% 
Czech Republic 18 27 4 8 0 44% 
Denmark 4 4 (0) 4 0 100% 
Estonia i] 1 1 0 0 0% 
Finland 13 37 1 10 1 85% 
France 333 421 44 192 2 58% 
Germany 892 1,510 168 562 0) 63% 
Greece 4 4 4 (0) (e) 0% 
Hungary 10 12 5 5 0 50% 
India 63 101 50 5 0 8% 
Ireland 31 54 4 22 ie} 71% 
Israel 8 11 1 5 1 75% 
Italy 138 147 24 35 ie} 25% 
Lithuania 1 3 (0) 1 0 100% 
Malta 2 2 1 1 0 50% 
Netherlands 61 128 12 44 (0) 72% 
Norway 5 16 ) 3 0 60% 
Pakistan 2 5 1 0 0 0% 
Poland 40 47 24 9 1 25% 
Portugal 14 16 10 2 ie} 14% 
Romania 3 6 1 1 0 33% 
Russia 9 483 9 (0) (0) 0% 
Slovakia 1 1 1 (0) 0) 0% 
Spain 76 94 30 33 0 43% 
Sweden 82 108 5 68 1 84% 
Switzerland 28 39 9 14 1 5A% 
Tiirkiye 21 25 ie 7 2 ui 
United Kingdom 1145 1,334 73 973 0 85% 
Argentina 3 8 2 (0) 0 0% 
Brazil 2,518 13,093 54 561 1,537 83% 
Chile 4 4 0 2 (0) 50% 
Colombia 1 1 (e) 1 (e) 100% 
Costa Rica 5 5 0 5 0 100% 
Dominican Republic 1 1 0 ie) 0 0% 
Peru 2 2 2 0 ie} 0% 
Turks and Caicos Islands "q 1 (0) te) 0 0% 


Canada 
Mexico 
United States of America 


12 
343,718 


1Only countries / regions where Apple received account requests during report period July 1-December 31, 2022 are listed. 


Apple Transparency Report: July 1-December 31, 2022 
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# of Account 
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Requests 
Challenged in Part 
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# of Account 
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Content Data 
Provided 


% of Account 
Requests Where 
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The number of account-based requests received from a government agency seeking customer 
data related to specific Apple account identifiers, such as Apple ID or email address. Account- 
based requests can be in various formats such as subpoenas, court orders, warrants, or other 
valid legal requests. We count each individual request received from each country/region and 
report the total number of requests received by country/region. 


The number of accounts specified in the requests. One request may contain one or multiple 
account identifiers. For example, in a case related to suspected phishing, law enforcement may 
seek information related to several accounts in a single request. We count the number of 
accounts identified in each request, received from each country/region, and report the total 
number of accounts specified in requests received by country/region. 


The number of account-based requests that resulted in Apple challenging the request in part, or 
rejecting the request in full, based on grounds such as a request does not have a valid legal basis, 
or is unclear, inappropriate, and/or over-broad. For example, Apple may reject a law enforcement 
request if it considers the scope of data requested as excessively broad for the case in question. 
We count each account-based request where we challenge it in part, or reject it in full, and report 
the total number of such instances by country/region. 


The number of account-based requests that resulted in Apple only providing non-content data, 
such as subscriber, account connections or transactional information, in response to a valid legal 
request. We count each account-based request where we provide only non-content data and 
report the total number of such instances by country/region. 


The number of account-based requests that resulted in Apple providing content data, such as 
stored photos, email, iOS device backups, contacts or calendars, in response to a valid legal 
request. We count each account-based request where we provide content data and report the 
total number of such instances by country/region. 


The percentage of account-based requests that resulted in Apple providing either non-content 
and/or content data. We calculate this based on the number of account-based requests that 
resulted in Apple providing data (including both non-content and content) per country/region, 
compared to the total number of account-based requests Apple received from that country/ 
region. 


Table 4: Worldwide Government Account Preservation Requests 


July 1-December 31, 2022 


Table 4 provides information regarding account preservation requests received. Under the U.S. Electronic Communications 
Privacy Act (ECPA) government agencies may request Apple to preserve users’ account data by performing a one-time data pull 
of the requested existing user data available at the time of the request for 90 days (up to 180 days if Apple receives a renewal 
request). Examples of such requests are where law enforcement agencies suspect an account may have been used unlawfully or 
in violation of Apple's terms of service, and request Apple to preserve the account data while they obtain legal process for the 


data. 


Country or Region’ 


Australia 
New Zealand 
Asia Pacific Total 


Austria 
Belgium 
Bulgaria 
Denmark 
Finland 
France 
Germany 
Hungary 
Iceland 
India 

Ireland 
Israel 

Italy 

Latvia 
Netherlands 
Norway 
Pakistan 
Qatar 
Romania 
Slovakia 
Slovenia 
South Africa 
Sweden 
Switzerland 
United Kingdom 
Europe, Middle East, India, Africa Total 


Brazil 
Latin America Total 


# of Account Preservation Requests 


Received 


# of Accounts Specified in the | 


# of Accounts Where Data 


Requests Preserved 

8 17 12 
1 1 

g) 18 1} 
5 16 16 
1 1 1 
4 U 4] 
6 ca 6 
3) 17 4 
4 4 2 
50 75 67 
1 1 1 
1] 1 1 
6 10 8 
18 25 24 
1 1 1 
4 1 1 
1 | 1 1 
5 15 ‘il 
3 8 6 
dl 3 (¢) 
1 1 1 
dl 1 sl 
1 1 0 
‘l al (e) 
1 1 (e) 
5 8 8 
2 6 3 
31 47 35 
151 254 i) 
220 1,171 1,022 
220 1,171 1,022 


Canada 25 | 50 43 


Mexico 


United States of America 
North America Total 


3 3 
18,857 14,565 
18,910 14,611 


1Only countries / regions where Apple received account preservation requests during report period July 1-December 31, 2022 are listed. 


# of Account 
Preservation 
Requests Received 


# of Accounts 
Specified in the 
Requests 


The number of account preservation requests received from a government agency. We count 
each individual request received from each country/region and report the total number of 
requests received by country/region. 


The number of accounts specified in the requests. One request may contain one or multiple 
account identifiers. For example, in a case related to suspected illegal activity, law enforcement 
may request Apple to preserve information related to several accounts in a single request. We 
count the number of accounts identified in each request, received from each country/region, and 


report the total number of accounts specified in requests received by country/region. 


# of Accounts 
Where Data 
Preserved 


The number of accounts that resulted in Apple preserving data in response to a valid preservation 
request. We count the number of accounts in each request where data was preserved and report 
the total number of accounts for which data was preserved by country/region. 


ce} 


Table 5: Worldwide Government Account Restriction/Deletion Requests 
July 1-December 31, 2022 


Table 5 provides information regarding account restriction/deletion requests received. Examples of such requests are where law 
enforcement agencies suspect an account may have been used unlawfully or in violation of Apple’s terms of service, and request 
Apple to restrict or delete the account. For requests seeking to restrict/delete a customer’s Apple ID, Apple requires a court order 
(including conviction or warrant) demonstrating that the account to be restricted/deleted was used unlawfully, except in situations 
where the case has been verified by Apple to relate to child endangerment. 


Country or Region’ # of Account Restriction/ # of Accounts Specified # of Requests Rejected/ # of Requests Where # of Requests Where 
Account Deletion in the Requests Challenged Where No Account Restricted Account Deleted 
Requests Received Action Taken 
Australia 3 4 | 0 | 3 | 0 
New Zealand 1 0 il 
Asia Pacific Total 4 | 5 0 | 4 0 
Denmark Al | oO | 1 0 
Germany? 4 6 0 3 0 
India 1 0 0 1 
Netherlands 2 0 2 0 
Norway? 4 0 1 ie} 
United Kingdom 1 14 1 10 0 
Europe, Middle East, 
India, Africa Total 2 ae i Ww d 
Latin America Total 0 | 0 | oy 0 | 0 
Canada 4 4 1 3 0 
United States of America? 27 41 4 21 1 
North America Total 31 | 45 5 24 1 


1Only countries / regions where Apple received account restriction/deletion requests during report period July 1-December 31, 2022 are listed. 
2One request received where Apple had no results for the account(s) identified in the request. 
# of Account The number of requests received from a government agency seeking to restrict or delete a 
Restriction/Account customer's Apple account. We count each individual request received from each country/region 
3 and report the total number of requests received by country/region. 
Deletion Requests e | Ls yireg 


Received 


# of Accounts The number of accounts specified in the requests. One request may contain one or multiple 
Specified inthe account identifiers. For example, in a case related to possession or distribution of illegal material, 
law enforcement may request Apple to restrict or delete several accounts in a single request. We 
count the number of accounts identified in each request, received from each country/region, and 
report the total number of accounts specified in requests received by country/region. 


Requests 


# of Requests The number of account restriction/deletion requests that resulted in Apple challenging or 
Rejected/ rejecting the request based on grounds such as a request does not have a valid legal basis, or is 
unclear, inappropriate, and/or over-broad, or where it is not accompanied by a court order 
Challenged Where (including conviction or warrant) demonstrating that the account to be restricted/deleted was 
No Action Taken used unlawfully; and where no action was taken by Apple. We count each account restriction/ 
deletion request where we challenge or reject it and report the total number of such instances by 
country/region. 


# of Requests The number of requests where Apple determined the request and order sufficiently demonstrated 
Where Account the account to be restricted was used unlawfully and we proceeded with restriction. We count 
Restricted each request where we proceeded with account restriction and report the total number of such 
instances by country/region. 


# of Requests The number of requests where Apple determined the request and order sufficiently demonstrated 
Where Account the account to be deleted was used unlawfully and we deleted the Apple account. We count each 
Deleted request where we deleted an account and report the total number of such instances by country/ 
region. 
10 


Table 6: Worldwide Government Push Token Requests’ 
July 1-December 31, 2022 


When users allow a currently installed application to receive notifications, an Apple Push Notification service token (push 
token) is generated and registered to that developer and device. Table 6 provides information regarding push token-based 
requests received. Examples of such requests are where law enforcement agencies are working on cases where they suspect 
the associated Apple Account may have been used unlawfully. Push token-based requests generally seek identifying details of 
the Apple Account associated with the device’s push token, such as name, physical address and email address. 


Country or Region2 # of Push Token Requests # of Push Tokens Specified in # of Push Token Requests % of Push Token Requests 
Received the Requests Where Data Provided Where Data Provided 

Singapore 1 2 0 0% 
Asia Pacific Total 1 2 (0) 0% 
Germany 1 1 0 0% 
Netherlands 2 687 1 50% 
United Kingdom 27 28 20 74% 
Eur Mit East, Indi 

Latin America Total 0 (0) (0) = 
United States of America | 39 76 33 85% 
North America Total 39 76 33 85% 


1 Apple was only permitted as of this reporting period to disclose information about push token requests. Prior to this, push token requests were 
included in Account and/or Device request tables. 
2Only countries / regions where Apple received push token requests during report period July 1-December 31, 2022 are listed. 


# of Push Token The number of requests received from a government agency seeking customer data related 
Requests Received to specific Apple Push Notification service token identifiers (push token). We count each 
individual request received from each country/region and report the total number of requests 
received by country/region. 


# of Push Tokens The number of push tokens specified in the requests. One request may contain one or 
Specified inthe multiple push token identifiers. For example, in a criminal investigation, law enforcement may 
Requests seek information related to several push tokens in a single request. We count the number of 
push tokens identified in each request, received from each country/region, and report the 
total number of push tokens specified in requests received by country/region. 


# of Push Token The number of push token-based requests that resulted in Apple providing data. We count 
Requests Where each push token-based request where we provide data and report the total number of such 


Data Provided instances by country/region. 


% of Push Token The percentage of push token—based requests that resulted in Apple providing data. We 
Requests Where calculate this based on the number of push token—based requests that resulted in Apple 
. providing data per country/region, compared to the total number of push token—based 
Data Provided requests Apple received from that country/region. 


Table 7: Worldwide Government Emergency Requests 
July 1-December 31, 2022 


Table 7 provides information regarding emergency requests received. Under the U.S. Electronic Communications Privacy Act 
(ECPA) government agencies may request Apple to voluntarily disclose information, including customer information and 
contents of communications, to a government entity if Apple believes in good faith that an emergency involving imminent 
danger of death or serious physical injury to any person requires such disclosure without delay. International agencies may 
make similar requests to Apple under applicable local law. Examples of such requests are where a person may be missing and 
law enforcement believes the person may be in danger. Emergency requests generally seek details of customers’ connections to 


Apple services. 
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1Only countries / regions where Apple received emergency requests during report period July 1-December 31, 2022 are listed. 
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# of Emergency 
Requests Received 


# of Requests 
Rejected/Challenged 
& No Data Provided 


# of Emergency 
Requests Where 
No Data Provided 


# of Emergency 
Requests Where 
Data Provided 


% of Emergency 
Requests Where 
Data Provided 


The number of emergency requests received from a government agency. We count each 
individual request received from each country/region and report the total number of requests 
received by country/region. 


The number of emergency requests that resulted in Apple challenging or rejecting the request 
based on grounds such as a request is unclear, inappropriate, or fails to demonstrate that it 
relates to an emergency circumstance; and where no data was provided. We count each 
emergency request where we challenge or reject it and report the total number of such 
instances by country/region. 


The number of emergency requests that resulted in Apple providing no data. For example, 
instances where there was no responsive data. We count each emergency request where we do 
not provide data and report the total number of such instances by country/region. 


The number of emergency requests that resulted in Apple providing data, such as connections 
to Apple services, subscriber or transactional information, or in certain instances customers’ 
iCloud content, such as stored photos, email, iOS device backups, contacts or calendars, in 
response to a valid emergency request. We count each emergency request where we provide 
data and report the total number of such instances by country/region. 


The percentage of emergency requests that resulted in Apple providing data. We calculate this 
based on the number of emergency requests that resulted in Apple providing data per country/ 
region, compared to the total number of emergency requests Apple received from that country/ 
region. 
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Table 8: US-UK Data Access Agreement: Investigatory Powers Act Requests from the UK 
July 1-December 31, 2022 


Table 8 provides information regarding Investigatory Powers Act (“IPA”) requests Apple received from the United Kingdom 
pursuant to the US-UK Data Access Agreement (entered into force on October 3, 2022). 


We report these requests received for Apple Accounts within ranges permissible by law pursuant to The Investigatory Powers 
(Disclosure of Statistical Information) Regulations 2018 ("IP DSI 2018"). Apple is required by law to delay initial reporting for a 
period of 18 months and report in bands of 500. Apple is required for subsequent reporting periods to delay reporting by 6 
months and report in bands of 500. Though we want to be more specific, this is currently the range permitted under IP DSI 2018 
for reporting this level of detail regarding IPA requests received under the US-UK Data Access Agreement. Under the law, Apple 
is limited in its ability to disclose what information or data may be sought through these requests. 


Request Type # of Requests Received # of Users/Accounts 


IPA Content Requests 0-499 0-499 


Request Type IPA warrant requests issued pursuant to the US-UK Data Access Agreement for content and non- 
content data. Non-content data is data such as subscriber or transactional information and 
connection logs. Content data is iCloud data such as stored photos, email, iOS device backups, 
contacts or calendars. 


# of Requests The number of IPA requests received. We count each individual request received for Apple users/ 
Received accounts and report the total number of requests received within bands/ranges permissible by law. 
Pursuant to IP DSI 2018, we are limited to providing this data in bands of 500. 


# of We count the number of users/accounts in each IPA request received for which Apple has data and 
Users/Accounts report the total number of users/accounts within bands permissible by law. Pursuant to IP DSI 2018, 
we are limited to providing this data in bands of 500. 


Table 9: United States Government National Security Requests 
July 1-December 31, 2022 


Table 9 provides information regarding United States national security requests that Apple received for customer data, including 
orders received under the Foreign Intelligence Surveillance Act ("FISA") and National Security Letters (“NSLs”). To date, Apple 
has not received any orders for bulk data. 


We report national security requests received for Apple users/accounts (NSLs and orders received under FISA) within ranges 
permissible by law pursuant to the USA FREEDOM Act of 2015 (“USA Freedom”). In order to report FISA non-content and 
content requests in separate categories, Apple is required by law to delay reporting by 6 months and report in bands of 500. 
Though we want to be more specific, this is currently the range permitted under USA Freedom for reporting this level of detail 
regarding national security requests. Apple responds to National Security FISA content requests with information obtained from 
iCloud. Under the law, Apple cannot further disclose what information or data may be sought through these requests. 


National Security Request Type # of Requests Received # of Users/Accounts 
FISA Non-Content Requests 0-499 36,000-36,499 
FISA Content Requests 0-499 34,500-34,999 
National Security Letters 2-499 503-999 

National Security Letters where 2 


non-disclosure order lifted 


The below table identifies the National Security Letters received during this reporting period where the non-disclosure orders 
have been lifted and public disclosure is permitted. See Apple’s Transparency website for redacted PDFs of these National 
Security Letters. 


National Security Letter # Issue Date Non-Disclosure Order End Date 
NSL-22-547634 8/1/22 11/23/22 
NSL-22-549566 12/2/22 2/15/24 


National Security FISA Non-Content & Content Requests: FISA Court issued orders for non-content or content data. 
Request Type Non-content data is data such as subscriber or transactional information and connection logs. 
Content data is data such as stored photos, email, iOS device backups, contacts or calendars. 


National Security Letters: Federal Bureau of Investigation issued requests for non-content data in 
national security investigations. Non-content data is data such as subscriber data. Apple does not 
produce transactional information and connection logs in response to National Security Letters. 


# of Requests The number of United States National Security requests received. We count each individual order and 
Received National Security Letter received for Apple users/accounts and report the total number of orders and 
National Security Letters received within bands/ranges permissible by law. Pursuant to USA Freedom, 
to report the number of non-content and content orders received, we are limited to providing this 
data in bands of 500. 


# of We count the number of users/accounts in each request received for which Apple has data and report 
Users/Accounts the total number of users/accounts within bands permissible by law. Pursuant to USA Freedom, we 
are limited to providing this data in bands of 500. 
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Tables 10, 11, 12, 13, 14: United States Government Requests by Legal Process Type 
July 1-December 31, 2022 


Tables 10, 11, 12, 13, and 14 provide information regarding United States requests by legal process type. Legal process types can 
be Search Warrants, Wiretap Orders, Pen Register/Trap and Trace Orders, Other Court Orders, or Subpoenas. 


Table 10: United States Government Device Requests by Legal Process Type 


Table 10 provides information regarding the types of legal process Apple received as Device Requests. 


# of Device Requests Search Warrants Wiretap Orders Pen Register/Trap Other Court Subpoenas 

& Trace Orders Orders 
6,464 1,000 N/A 1 139 5,324 
% of Total (100%) 15.5% - ~0% 2.2% 82.4% 


Table 11: United States Government Financial Identifier Requests by Legal Process Type 


Table 11 provides information regarding the types of legal process Apple received as Financial Identifier Requests. 


# of Financial Identifier Search Warrants Wiretap Orders Pen Register/Trap Other Court Subpoenas 
Requests & Trace Orders Orders 

818 176 N/A 0) 36 606 
% of Total (100%) 22% - - 4% 74% 


Table 12: United States Government Account Requests by Legal Process Type 


Table 12 provides information regarding the types of legal process Apple received as Account Requests. 


# of Account Requests Search Warrants Wiretap Orders Pen Register/Trap Other Court Subpoenas 

& Trace Orders Orders 
8,480 4,211 0) YA 479 3,718 
% of Total (100%) 49.7% 0% 0.8% 5.6% 43.8% 


Table 13: United States Government Push Token Requests by Legal Process Type 


Table 13 provides information regarding the types of legal process Apple received as Push Token Requests. 


# of Push Token Search Warrants Wiretap Orders Pen Register/Trap Other Court Subpoenas 
Requests & Trace Orders Orders 

39 0 N/A 0) 15 24 
% of Total (100%) 0% - 0% 38% 62% 


Table 14: United States Government Geofence Requests by Legal Process Type 


Table 14 provides information regarding search warrants Apple received as Geofence Requests. Apple does not have any data to 
provide in response to geofence warrants. 


# of Geofence Search Warrants Wiretap Orders Pen Register/Trap Other Court Subpoenas 
Requests & Trace Orders Orders 

23 23 N/A N/A N/A N/A 
% of Total (100%) 100% - - - - 
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# of Device/ 
Financial Identifier/ 
Account/ Push 
Token Requests 


# of Geofence 
Requests 


Search Warrants 


Wiretap Orders 


Pen Register/Trap & 
Trace Orders 


Other Court Orders 


Subpoenas 


% of Total 


The total number of United States government requests Apple received by request type (Device, 
Financial Identifier, Account, and Push Token). We count each individual request received from the 
United States by request type and report the total number of requests received by request type. 


The total number of United States government requests Apple received seeking customer data 
related to specific latitude and longitude coordinates (geofence) for a specified time period. We 
count each individual request received from government agencies and report the total number of 
requests received. Apple does not have any data to provide in response to Geofence Requests. 


A search warrant is a judicial document used in a criminal case authorizing law enforcement 
officers to search a person or place to obtain evidence. The Fourth Amendment requires that law 
enforcement officers obtain search warrants by submitting affidavits and other evidence to a judge 
or magistrate to meet a burden of proof that a search will yield evidence related to a crime. The 
judge or magistrate will issue the warrant if satisfied that the law enforcement officers have met 
the burden of proof. For customer content, Apple requires a search warrant issued upon a showing 
of probable cause in order to provide content. 


A wiretap order is a specific type of court order used in a criminal case that authorizes law 
enforcement officers to obtain contents of communications in real-time. A Title Ill wiretap order 
includes requirements that law enforcement officers make an application and furnish evidence to a 
judge or magistrate to demonstrate there is probable cause to believe that interception of 
communications will yield evidence related to a particular crime, there is probable cause to believe 
that an individual has committed or is about to commit a particular crime and must specifically 
identify the individual/target whose communications are to be intercepted. A statement must also 
be included as to whether other investigatory measures have been tried and failed or are unlikely to 
succeed. If satisfied that the requirements have been met, the judge or magistrate will issue the 
wiretap order. A wiretap order allows the government to obtain content on a forward-looking basis 
for a specific limited period of time as opposed to stored historical content. Apple can intercept 
users’ iCloud email communications upon receipt of a valid Wiretap Order. Apple cannot intercept 
users’ iMessage or FaceTime communications as these communications are end-to-end 
encrypted. 


A pen register or trap and trace order is a specific type of court order used in a criminal case 
authorizing law enforcement officers to obtain headers of electronic communications and other 
non-content data in real-time. A pen register order requires law enforcement officers to make a 
statement of the offense to which the pen register relates and certify the information likely to be 
obtained is relevant/material to an ongoing criminal investigation. The legal standard for obtaining a 
pen register order is lower than what is required for a search warrant or a wiretap order. A pen 
register order allows the government to obtain non-content data on a forward-looking basis for a 
specific limited period of time as opposed to stored historical information. A pen register order can 
be combined with a court order/warrant for historical records; in such instances, we report the 
process type as pen register/trap and trace order. 


A court order is a document issued by a judge or magistrate directing a person or entity to comply 
with the order. An order may be issued in either a criminal or civil case. Government agencies 
applying for an order in a criminal case must generally present facts and evidence to a judge or 
magistrate showing there are reasonable grounds to believe that the information sought is relevant 
and material to an ongoing criminal investigation or similar legal standard. Non-content data such 
as subscriber and transaction information can be provided in response to a court order. 


A subpoena or equivalent legal process request (e.g. petition or summons) is a document issued 
by a government agency or court directing a person or entity to comply with requests for 
information. Local, state and federal government agencies may issue subpoenas. Under many 
jurisdictions, a judge or magistrate is not required to review a subpoena before it is issued. 
Accordingly, the subpoena has the lowest threshold for burden of proof. A subpoena may be 
issued in either a criminal or civil case. Non-content data such as device, subscriber and 
connection information can be provided in response to a subpoena. 


The percentage of requests by Legal Process Type. We calculate this based on the number of 
respective Legal Process Types compared to the respective total number of Device/Financial 
Identifier/Account/Push Token Requests received by Apple. 


17 


Table 15: United States Private Party Requests for Information 
July 1-December 31, 2022 


Table 15 provides information regarding United States private party (non-government) requests for information. Examples of such 
requests are where private litigants are involved in either civil or criminal proceedings. Apple complies with these requests insofar 
as we are legally required to do so. 


# of Private Party Requests # of Requests Rejected/ # of Requests Where No # of Requests Where Data 
Challenged & No Data Provided Data Provided Provided 

294 242 23 29 

% of Total (100%) 82% 8% 10% 


# of Private Party The number of requests received from private parties (non-government) in the United States seeking 
Requests customer data related to specific devices, financial identifiers and/or accounts. We count each 
individual request received from private parties and report the total number of requests received. 


# of Requests The number of private party requests that resulted in Apple challenging or rejecting the request based 
Rejected/ on grounds such as a request does not have a valid legal basis, or is unclear and/or over-broad; and 
Challenged & where no data was provided. We count each private party request where we challenge or reject it in 
No Data Provided full, and report the total number of such instances. 


# of Requests The number of private party requests that resulted in Apple providing no data. For example, where 
Where No Data there was no responsive data. We count each instance where we do not provide data in response to a 
Provided private party request and report the total number of such instances. 


# of Requests The number of private party requests that resulted in Apple providing data in response to valid legal 
Where Data process or subscriber consent. We count each instance where we provide data in response to a 
Provided private party request and report the total number of such instances. 


% of Total The percentages are calculated based on the number of the respective response types compared to 
the total number of private party requests received by Apple. 
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Table 16: United States Private Party Requests for Account Restriction/Deletion 
July 1-December 31, 2022 


Table 16 provides information regarding United States private party (non-government) requests for Apple account restriction/ 
deletion. Examples of such requests are where private litigants are involved in either civil or criminal proceedings, and requests for 
Apple to restrict/delete an account may arise. For requests seeking to restrict/delete a customer's Apple ID, Apple requires a court 
order. Apple complies with these requests insofar as we are legally required to do so. 


# of Account Restriction/ 
Account Deletion Requests 
Received 


0) 


# of Account 
Restriction/Account 
Deletion Requests 
Received 


# of Accounts 
Specified in the 
Requests 


# of Requests 
Rejected/Challenged 
Where No Action 
Taken 


# of Account 
Restriction Requests 
Where Account 
Restricted 


# of Account 
Deletion Requests 
Where Account 
Deleted 


Specified in the 


# of Account Restriction # of Account Deletion 
Challenged Where No Requests Where Requests Where 
Action Taken Account Restricted Account Deleted 


0 0 0 0 


# of Accounts # of Requests Rejected/ 


Requests 


The number of requests received from private parties (non-government), such as participants in 
a civil or family law case, seeking to restrict or delete a customer's Apple ID. We count each 
individual request received from private parties and report the total number of requests received. 


The number of accounts specified in the requests. One request may contain one or multiple 
account identifiers. For example, in a case related to multiple shared accounts, a private party 
may request Apple to restrict or delete several accounts in a single request. We count the 
number of accounts identified in each request received from private parties and report the total 
number of accounts specified in requests received. 


The number of account restriction/deletion requests that resulted in Apple challenging or 
rejecting the request based on grounds such as a request does not have a valid legal basis, or is 
unclear, inappropriate, and/or over-broad, or where it is not accompanied by a court order 
demonstrating the grounds upon which the account is to be restricted/deleted; and where no 
action was taken by Apple. We count each account restriction/deletion request where we 
challenge or reject it and report the total number of such instances. 


The number of account restriction requests where Apple determined the request and order 
sufficiently demonstrated the grounds upon which the specified account was to be restricted; 
and we proceeded with the requested restriction. We count each account restriction request 
where we proceeded with restriction and report the total number of such instances. 


The number of account deletion requests where Apple determined the request and order 
sufficiently demonstrated the grounds upon which the specified account was to be deleted; and 
we deleted the Apple account. We count each account deletion request where we deleted an 
account and report the total number of such instances. 
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Table 17: Worldwide Government Digital Content Provider Requests 
July 1-December 31, 2022 


Table 17 provides information regarding government requests received where digital content provider information is requested. 
Examples of such requests are where law enforcement agencies are investigating a digital content provider who may have 
provided a service or content (e.g. app, music, or podcast) that is alleged/suspected to violate local law. These requests generally 
seek details of the content provider, such as name, email address, physical address, and in certain instances payment details or 


other information. 


Country or Region’ 


China mainland 
Japan 


New Zealand 


Asia Pacific Total | 


India 
Netherlands 


Sweden 


Europe, Middle East, India, Africa 


% of Content Provider 
Requests Where Data 
Provided 


# of Content Provider 
Requests Where Data 
Provided 


# of Content Provider 
Requests Objected to in Part 
or Rejected in Full 


# of Content Provider 
Requests Received 


6 3 4 67% 
5 83% 
1 0 0% 
13 5 7 69% 
3 0 2 67% 
0 100% 
1 0 1 100% 
5 ) 4 80% 


Total 


Brazil 
Latin America Total 


United States of America 
North America Total 


1Only countries / regions where Apple received digital content provider requests during report period July 1-December 31, 2022 are listed. 


# of Content 
Provider Requests 
Received 


# of Content 
Provider Requests 
Objected to in Part 

or Rejected in Full 


# of Content 
Provider Requests 
Where Data 
Provided 


% of Content 
Provider Requests 
Where Data 
Provided 


The number of requests received from government agencies seeking digital content provider 
information related to specific digital content identifiers, such as digital asset ID, content provider 
ID, or digital content name. Requests can be in various formats such as subpoenas, court orders, 
warrants, or other valid legal requests. We count each individual request received from each 
country/region and report the total number of requests received by country/region. 


The number of digital content provider-based requests that resulted in Apple objecting to or 
rejecting the request in part or in full based on grounds such as a request that does not have a 
valid legal basis, or is unclear, inappropriate, and/or over-broad. For example, Apple may reject a 
law enforcement request if it considers the scope of data requested to be excessively broad for the 
case in question. We count each digital content provider-based request where we object in part or 
reject in full and report the total number of such instances by country/region. 


The number of digital content provider requests that resulted in Apple providing data, such as 
content provider name and contact information associated with a specific app, music item, or 
podcast, in response to a valid legal request. We count each digital content provider request where 
we provide data and report the total number of such instances by country/region. 


The percentage of digital content provider requests that resulted in Apple providing data. We 
calculate this based on the number of digital content provider-based requests that resulted in 
Apple providing data per country/region, compared to the total number of digital content provider- 
based requests Apple received from that country/region. 


20 


Worldwide Government App Store Takedown Requests 
January 1—-December 31, 2022 


Beginning with the 2022 calendar year, Apple publishes government App Store takedown requests in a dedicated App Store 
Transparency Report that includes data showing takedown demands by government entity and law cited. See https:// 
www.apple.com/legal/more-resources/. 
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Matters of note in this 
report: 


Government requests 
related to customer 
data / accounts 


Table 1 Worldwide Government Device Requests 
Australia - High number of devices specified in requests predominantly due to a tax 
investigation. 


Germany - High number of devices specified in requests predominantly due to a tax 
investigation. 


India - High number of devices specified in requests predominantly due to a customs 
authority investigation. 


Netherlands - High number of devices specified in requests predominantly due to a 
stolen device investigation. 


Russia - High number of devices specified in requests predominantly due to a 
warehouse related investigation. 


Table 2 Worldwide Government Financial Identifier Requests 
Belgium - High number of financial identifiers specified in requests predominantly due to 
a financial fraud investigation involving Apple Gift Cards. 


Table 3 Worldwide Government Account Requests 
United States of America - High number of account identifiers specified in requests due 
to an investigation seeking to identify financial victims affected by a bankruptcy. 


Clarifying Lawful Overseas Use of Data (CLOUD) Act Requests 

Requests received pursuant to the United States CLOUD Act are included in Apple's 
transparency report. Apple received 26 CLOUD Act Investigatory Power Act (IPA) 
Communications Data Requests (seeking metadata only) issued by the United Kingdom 
government in this reporting period. We count and report CLOUD Act requests under the 
country of origin. 


Mutual Legal Assistance Treaty (MLAT) Requests 

Requests received from a foreign government pursuant to the MLAT process or through 
other cooperative efforts with the United States government are included in Apple's 
transparency report. Apple has identified 23 MLAT requests for information were issued 
by the United States government in this reporting period. However, this may not be the 
precise number of MLAT requests received, as in some instances a United States court 
order or search warrant may not indicate that it is the result of an MLAT request. In 
instances where the originating country was identified, we count and report the MLAT 
request under the country of origin. In instances where the originating country was not 
identified, we count and report the request under the United States of America. 
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